Privacy Policy

Last updated: 4 August 2026.

MediaWipeTool helps you find your own content in third-party Reddit archives and prepare requests to have it removed, and this policy explains what we collect, what we deliberately do not, and why. It is written to be checkable: most of what follows is a property the software cannot violate, not a promise about how we behave.

Who we are

MediaWipeTool is operated at mediawipetool.com. You can reach us at contact@mediawipetool.com. We are not affiliated with, endorsed by, or sponsored by Reddit, Inc.

What we collect

Your account: the username and password you choose here, with the password stored only as a bcrypt hash, never in plain text. We do not ask for your email address or your real name.
Server logs: like every website, our server records the requests it receives (the time, your IP address, the page you asked for, and the identifying string your browser sends) so that a fault can be told from an attack. Kept for about a month, then deleted automatically.
A service event record: that an action happened, when, and which MediaWipeTool account did it: signing in, proving an account, running a scan, downloading your case file. It is the only thing that ties an action to an account, and it is kept for about a month.
Cookies. Described in their own section below.

What we do not collect

The Reddit account you look up is never written to our database. There is no column that could hold it, so this is not a policy we follow but a thing the software cannot do.

We never contact Reddit: not to check your account, not to read your history, not at all. The code refuses to make the request.
No measurement of your Reddit account is stored: item counts, subreddits and date ranges are never written down anywhere. A scan records only whether each archive answered and how long it took, which are facts about the archive, not about you.
No profile of you is built. We do not draw conclusions from your posts, and nothing we read changes anything except which removal channels we show you.
Your two identities are never linked in our records: not for analytics, not for support, not for convenience.
No analytics and no trackers: there is no analytics service, no tracking pixel, and no third-party script on any page. Your browser is instructed to refuse them, and the fonts are served from our own server so that loading them cannot hand your address to anyone else.

Your case file

When you download a case file, it is a signed record of what was found that you keep, and we store no copy of it. That is deliberate: a service that kept a list of people scrubbing their footprint would hold the most sensitive data of all, so it holds none of it.

The trade-off is that we cannot re-send or recover a case file for you; it is yours to keep.

Cookies

Your session: a cookie that keeps you signed in. It is an opaque random value, marked HttpOnly and Secure, and it is checked against our server on every request so that signing out ends it immediately.
Your proven Reddit account: when you prove an account is yours, the verified username is held in a signed cookie in your browser for one hour, and nowhere else, never in our database. Signing out or unlinking ends it.
No advertising or tracking cookies. We set none, and no third party sets any through this site.

Third parties

The archives: to show you what is held, two independent third-party archives are asked what they have under the account name you are checking, and that name is the request, so it is what gets sent. Arctic Shift is asked by our server (so it sees our server and not you), while PullPush is asked by your own browser because it does not answer our server, so PullPush sees your address the same way it would if you opened their site yourself.
We are not affiliated with either archive, and their own handling of data is governed by their own policies.
Donations: if you choose to donate, you leave this site for a payment provider (such as PayPal, Ko-fi, or Buy Me a Coffee), and those providers have their own privacy policies. We receive no card details and keep no donor record.
We do not sell your data, to anyone, ever. There are no data brokers and no ad networks involved in this site.

How long we keep things

Server logs and the service event record are kept for about a month, then deleted automatically, and your account lasts until you ask us to remove it or an administrator does. Because the Reddit account you scan is never stored, there is nothing about your scans to retain or delete.

Your choices

You can unlink a proven Reddit account or sign out at any time, which ends the only place your verified username lives. To have your MediaWipeTool account and its records removed, contact us at contact@mediawipetool.com.

Security

The site is served only over an encrypted connection, and passwords are hashed with bcrypt and never stored or logged in plain text. Cookies that keep you signed in are marked HttpOnly and Secure so that other scripts and other sites cannot read them.

Children

This service is intended for adults managing their own online footprint and is not directed at children. If you are a minor and intimate images of you are being shared without your consent, there is help that needs no account, linked in the footer of every page.

Changes to this policy

If we change this policy, we will update the date at the top. Because we keep so little, most changes here will be to say so more clearly rather than to collect anything new.

Contact

Questions about this policy: contact@mediawipetool.com.